Frank Yang
1051f42f96
fix(stability): patch regex retries and timeout abort handling
2026-02-22 10:59:34 +01:00
Peter Steinberger
f4dd0577b0
fix(security): block hook transform symlink escapes
2026-02-22 10:18:05 +01:00
Peter Steinberger
2c6dd84718
fix(gateway): remove hello-ok host and commit fields
2026-02-22 10:17:36 +01:00
Peter Steinberger
f101d59d57
feat(security): warn on dangerous config flags at startup
2026-02-22 10:11:46 +01:00
Peter Steinberger
7cac6bd85d
test(core): continue mock reset reductions in auth, gateway, npm install
2026-02-22 08:28:50 +00:00
Peter Steinberger
8887f41d7d
refactor(gateway)!: remove legacy v1 device-auth handshake
2026-02-22 09:27:03 +01:00
Peter Steinberger
b014c70292
test(core): trim reset usage in gateway and install source specs
2026-02-22 08:25:09 +00:00
Peter Steinberger
d6d73d0ed9
test(core): trim redundant test resets and use mockClear
2026-02-22 08:12:55 +00:00
Peter Steinberger
88c564f050
test(gateway): use lightweight clears in agent handler tests
2026-02-22 08:01:16 +00:00
Peter Steinberger
1f0695ba47
test(core): use lightweight clears in update, child adapter, and copilot token setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
be5921e8fe
test(gateway): use lightweight clears for openresponses agent fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
682e42b0a1
test(gateway): use lightweight clears for openai http agent fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
d624aa5ab2
test(gateway): use lightweight clears for chat-b reply spy fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
9daab2abb3
test(gateway): use lightweight clears in client close setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
56c57048cb
test(gateway): use lightweight clears for hook cron run fences
2026-02-22 08:01:16 +00:00
Peter Steinberger
4cc975fec1
test(gateway): use lightweight clears in node event setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
d9085a7704
test(gateway): use lightweight clears in node invoke wake setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
c358ada510
test(gateway): use lightweight clears in push handler setup
2026-02-22 08:01:16 +00:00
Peter Steinberger
2b24a44cd9
test(gateway): use lightweight clears in cron service setup
2026-02-22 08:01:15 +00:00
Peter Steinberger
ba2790222d
test(gateway): dedupe loopback cases and trim setup resets
2026-02-22 08:00:41 +00:00
Peter Steinberger
9f97555b5e
refactor(security): unify hook rate-limit and hook module loading
2026-02-22 08:57:01 +01:00
Peter Steinberger
3d03375043
fix(gateway): block avatar symlink escapes
2026-02-22 08:51:17 +01:00
Peter Steinberger
265da4dd2a
fix(security): harden gateway command/audit guardrails
2026-02-22 08:45:48 +01:00
Peter Steinberger
b109fa53ea
refactor(core): dedupe gateway runtime and config tests
2026-02-22 07:44:57 +00:00
Peter Steinberger
d325c01503
test(gateway): dedupe canvas ws connect assertions
2026-02-22 07:44:57 +00:00
Peter Steinberger
6471ff02dc
test(gateway): dedupe chat history transcript helpers
2026-02-22 07:44:57 +00:00
Peter Steinberger
64b9ae8fb1
test(gateway): reuse shared openai timeout e2e helpers
2026-02-22 07:44:57 +00:00
Peter Steinberger
c4aac407dc
test(gateway): dedupe openai context assertions
2026-02-22 07:44:57 +00:00
Peter Steinberger
b0f6f18569
test(gateway): dedupe control-ui not-found fixture assertions
2026-02-22 07:44:57 +00:00
Peter Steinberger
16f6b55cd4
test(gateway): dedupe tailscale header auth fixtures
2026-02-22 07:44:57 +00:00
Peter Steinberger
a2a19cdad2
test(gateway): dedupe transcript seed fixtures in fs session tests
2026-02-22 07:44:57 +00:00
Peter Steinberger
a4b3aeeefa
test(gateway): reuse last agent command assertion helper
2026-02-22 07:44:56 +00:00
Peter Steinberger
3284d2eb22
fix(security): normalize hook auth rate-limit client keys
2026-02-22 08:40:49 +01:00
Peter Steinberger
e0db04a50d
fix(security): harden avatar validation and size limits
2026-02-22 08:35:32 +01:00
Vignesh Natarajan
f2d664e24f
Gateway: deep-compare array config paths for reload diff
2026-02-21 19:17:46 -08:00
Vignesh Natarajan
4550a52007
TUI: filter model picker to allowlisted models
2026-02-21 19:03:15 -08:00
Peter Steinberger
e84d89ab06
test(gateway): extract shared parse warning helper
2026-02-21 23:32:32 +00:00
Peter Steinberger
d748657265
test(gateway): table-drive runtime config validation matrix
2026-02-21 23:29:29 +00:00
Peter Steinberger
833144fd72
test(gateway): tighten e2e timeout budget
2026-02-21 23:28:07 +00:00
Peter Steinberger
98790339ef
test: dedupe repeated validation and throw assertions
2026-02-21 23:28:07 +00:00
Peter Steinberger
c78ea8ec3f
test(gateway): tighten health e2e timeout ceilings
2026-02-21 23:28:06 +00:00
Marcus Widing
fa4e4efd92
fix(gateway): restore localhost Control UI pairing when allowInsecureAuth is set ( #22996 )
...
* fix(gateway): allow localhost Control UI without device identity when allowInsecureAuth is set
* fix(gateway): pass isLocalClient to evaluateMissingDeviceIdentity
* test: add regression tests for localhost Control UI pairing
* fix(gateway): require pairing for legacy metadata upgrades
* test(gateway): fix legacy metadata e2e ws typing
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-02-22 00:04:52 +01:00
Peter Steinberger
b2de8719ad
test(gateway): normalize canvas ws watchdog timeouts
2026-02-21 23:02:44 +00:00
Peter Steinberger
81a85c19ff
test(gateway): tighten e2e timeouts and dedupe invoke checks
2026-02-21 23:02:44 +00:00
bmendonca3
6ac89757ba
Security/Gateway: harden Control UI static path containment ( #21203 )
...
* Security/Gateway: harden Control UI static path containment
* gateway: block control-ui symlink escapes
* CI: retrigger flaky node test lane
---------
Co-authored-by: Brian Mendonca <brianmendonca@Brians-MacBook-Air.local >
2026-02-21 23:47:51 +01:00
Peter Steinberger
4ef4aa3c10
refactor(gateway): streamline control-ui secure file serving
2026-02-21 23:36:55 +01:00
Peter Steinberger
7c500ff623
fix(security): harden control-ui static path resolution
2026-02-21 23:10:55 +01:00
Peter Steinberger
cc2ff68947
test: optimize gateway infra memory and security coverage
2026-02-21 21:44:50 +00:00
Peter Steinberger
3274a1b804
test(gateway): dedupe control-ui fixture setup and cover query asset 404
2026-02-21 21:40:39 +00:00
Peter Steinberger
8f11868cc2
test(gateway): dedupe boot workspace setup and cover boot failures
2026-02-21 21:40:38 +00:00
